Contents 1 Executive Summary2 Introduction2.1 Scope2.2 Approach2.3 Classification and Severity Rating3 Findings3.1 Summary of Findings3.2 Static Analysis Results3.3 Dynamic Analysis Results3.4 Detailed Findings3.4.1 OVPN-01: Sensitive authentication token not wiped on…
The Intel remote vulnerability which was recently disclosed has been discussed in more detail, and it's much, much worse than you thought. It's not just that the Intel servers are…
The UK government is seeking an expansion to their mass surveillance powers on the Internet. The plans were leaked and released by the Open Rights Group. The draft rules were only officially circulated…
A Florida judge has granted a motion to compel two suspects in an ongoing case to reveal their smartphone passcodes. Prosecutors were granted a motion to compel two defendants to give…
According to security researchers, media, and now Intel themselves, a security hole allowing remote code execution (RCE) has been present in Intel CPUs since 2008. The exploit was usable on…
Lyrebird.ai, a new tech startup out of Montreal, Canada, promises to let you recreate anyone's voice with just a single minute of recording data. They even promise to be able…
The US Patent Office's (USPTO) website is now unusable with HTTPS as of April 21st, 2017. This has happened despite a 2015 policy from the White House that promised an HTTPS only…
Censorship in Russia may soon be aided by the very websites and services often used to bypass it. Russia censors its Internet through the Federal Service for Supervision in the Sphere…
New US regulations ban laptops on board some aircraft, requiring laptops to be in checked luggage. One of the first things you learn in information security is that if an…
IPv6 is currently being rolled out around the world, but IPv6 security concerns continue to pour in. Internet protocol version 6, or IPv6, is the successor to IPv4. Recently, researchers…